Commands by matthewdavis

Commands by matthewdavis (3)

sorted by

Convert .flv to .avi

I'm not well enough versed in the differences between ffmpeg & mencoder to know which one is better.
This is sample output - yours may be different.
0

ffmpeg -i file.flv file.avi

matthewdavis · 2010-09-02 18:18:38 3
Change user, assume environment, stay in current dir

I've used this a number of times troubleshooting user permissions. Instead of just 'su - user' you can throw another hyphen and stay in the original directory. Show Sample Output
This is sample output - yours may be different.
```
[root@localhost local]# pwd
/usr/local
[root@localhost local]# su -- user
[user@localhost local]$ pwd
/usr/local
[user@localhost local]$
```
13

su -- user

matthewdavis · 2009-09-28 04:23:43 4
Find files that were modified by a given command

This has helped me numerous times trying to find either log files or tmp files that get created after execution of a command. And really eye opening as to how active a given process really is. Play around with -anewer, -cnewer & -newerXY Show Sample Output
This is sample output - yours may be different.
```
[root@localhost ~]# touch /tmp/service
[root@localhost ~]# service cups restart
Stopping cups:                                             [  OK  ]
Starting cups:                                             [  OK  ]
[root@localhost ~]# find /var -newer /tmp/service
/var/cache/cups/job.cache
/var/lock/subsys
/var/lock/subsys/cups
/var/log/audit/audit.log
/var/run
/var/run/cupsd.pid
/var/run/cups
/var/run/cups/cups.sock
/var/run/cups/certs
/var/run/cups/certs/0
[root@localhost ~]#
```
22

touch /tmp/file ; $EXECUTECOMMAND ; find /path -newer /tmp/file

matthewdavis · 2009-08-31 18:47:19 9

What's this?

commandlinefu.com is the place to record those command-line gems that you return to again and again. That way others can gain from your CLI wisdom and you from theirs too. All commands can be commented on, discussed and voted up or down.

Share Your Commands

Check These Out

Displays the number of processes per state

Detect illegal access to kernel space, potentially useful for Meltdown detection

Based on capsule8 agent examples, not rigorously tested

Which processes are listening on a specific port (e.g. port 80)

swap out "80" for your port of interest. Can use port number or named ports e.g. "http"

Ruby - nslookup against a list of IP`s or FQDN`s

This version uses host and no ruby.

Delete a file/directory walking subdirectories (bash4 or zsh)

Blacklist usb storage

Some times you may ban usb to protect thefting of your personal data. Blacklist the usb_storage module by adding blacklist usb_storage to /etc/modprobe.d/blacklist.conf. To load the module manually, $sudo modprobe usb_storage.

FInd the 10 biggest files taking up disk space

This combines the above two command into one. Note that you can leave off the last two commands and simply run the command as "find /home/ -type f -exec du {} \; 2>/dev/null | sort -n | tail -n 10" The last two commands above just convert the output into human readable format.

Efficient remote forensic disk acquisition gpg-crypted for multiple recipients

Acquires a bit-by-bit data image, gzip-compresses it on multiple cores (pigz) and encrypts the data for multiple recipients (gpg -e -r). It finally sends it off to a remote machine.

Get AWS temporary credentials ready to export based on a MFA virtual appliance

You might want to secure your AWS operations requiring to use a MFA token. But then to use API or tools, you need to pass credentials generated with a MFA token. This commands asks you for the MFA code and retrieves these credentials using AWS Cli. To print the exports, you can use: `awk '{ print "export AWS_ACCESS_KEY_ID=\"" $1 "\"\n" "export AWS_SECRET_ACCESS_KEY=\"" $2 "\"\n" "export AWS_SESSION_TOKEN=\"" $3 "\"" }'` You must adapt the command line to include: * $MFA_IDis ARN of the virtual MFA or serial number of the physical one * TTL for the credentials

Backup files older than 1 day on /home/dir, gzip them, moving old file to a dated file.

Useful for backing up old files, custom logs, etc. via a cronjob.

Stay in the loop…

Follow the Tweets.

Every new command is wrapped in a tweet and posted to Twitter. Following the stream is a great way of staying abreast of the latest commands. For the more discerning, there are Twitter accounts for commands that get a minimum of 3 and 10 votes - that way only the great commands get tweeted.

» http://twitter.com/commandlinefu
» http://twitter.com/commandlinefu3
» http://twitter.com/commandlinefu10

Subscribe to the feeds.

Use your favourite RSS aggregator to stay in touch with the latest commands. There are feeds mirroring the 3 Twitter streams as well as for virtually every other subset (users, tags, functions,…):

Subscribe to the feed for:

» all commands
» commands with 3 up-votes (commandlinefu3)
» commands with 10 up-votes (commandlinefu10)
» commands by matthewdavis